Penetration testing typically evaluates a system's ability to protect its networks, applications, endpoints, and users from external or internal threats. It should also be noted that application penetration testing https://www.4front.io/2022/04/application-penetration-testing-steps-methods-tools/ tries to protect security controls and only provides authorized access.